Docket No. 4502-1085 
Appln. No. 10/540,328 

AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, 
and listings, of claims in the application: 

LISTING OF CLAIMS : 

1-20. (canceled) 

21. (currently amended) A method of providing a VPN 
communication between two or more network devices of unknown 
network address at least a first one of which network devices 
does not initially know the other network devices internet 
network addresses, the method comprising: 

providing a verification authority connected to the 
internet remote from the two or more network devices and remote 
from an internet service provider providing an internet 
connection to each of the two or more network devices, the 
verification authority capable of verifying the identity of the 
two or more internet network devices; 

providing a configuration server connected to the 
internet remote from the two or more network devices and remote 
from the internet service provider providing an internet 
connection to each of the two or more network devices, the 
configuration server capable — ef- — supplying to each verified 
internet device the entire configuration data for that verified 
internet device; 



2 



Docket No. 4502-1085 
Appln. No. 10/540,328 

providing each of the two or more network devices 
having — n-e — free of provision to permanently store the user 
configuration data, each of the devices containing configuration 
information only sufficient to connect the devices to an the 
internet service provider to request a first IP address, and 
using that first IP address to connect to the remote verification 
authority at a designated internet address, providing within each 
of the two or more network devices, a routine which securely 
contacts the remote verification authority, providing the 
identity of the network device, and using the designated internet 
address of that remote verification authority, and subsequently 
downloading from a remote configuration authority authorized by 
the remote verification authority the entire configuration data 
each time the device is initialized, for one of the two or more 
internet network devices, each time that device is initialized, 
reloading that device with the downloaded configuration data^ 
each of the two or more network devices creating a private 
network in a downlink separate from end user devices in the 
created private network ; and 

storing the allocated internet network address of the 
network device at the verification authority, 
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repeating the process for each of the other network 
devices so that each of the other network devices downloads from 
the remote configuration server authorized by the remote 
verification authority the entire configuration data for that 
particular internet network device each time that particular 
device is initialized and reloading that particular device with 
the downloaded configuration data, and storing the allocated 
internet network address for that particular device at the 
verification authority, and initiating a VPN communication 
between two or more of the network devices, by sending an 
instruction from the verification authority to one of the network 
devices by supplying to that network device the allocated 
internet address of at least one of the other network devices so 
that the recipient internet device can communicate with the other 
network device. 

22. (currently amended) The method as claimed in claim 
-2-2-21, wherein the two or more network devices are routers . 

23. (previously presented) The method as claimed in 
claim 21, wherein the routers form part of ADSL modems. 

24. (previously presented) The method as claimed in 
claim 21, wherein the configuration data is downloaded as a 
single transaction. 
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25. (previously presented) The method as claimed in 
claim 21, wherein the configuration data is lost when the network 
device loses power. 

26. (previously presented) The method as claimed in 
claim 24, wherein the configuration data remains unchanged for 
the duration of the network devices powered on cycle. 

27. (previously presented) The method as claimed in 
claim 24, wherein the configuration data is only downloaded upon 
a power up seguence . 

28. (currently amended) A method of providing a VPN 
communication over the internet between two or more internet 
network devices having an allocated or other internet address at 
least a first one of which network devices does not initially 
know the other network devices internet network addresses, the 
method comprising: 

providing a remote authority connected to the internet 
remote from the one or more network devices and remote from an 
internet service provider providing an internet connection to 
each of the two or more network devices, the verification 
authority capable of verifying the identity of the one or more 
internet network devices; and 
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requiring each of the network devices to communicate 
with the remote authority to inform the remote authority of the 
current public IP address of the network device, and storing the 
current public IP address of each network device at the remote 
authority, 

wherein a VPN can be initiated from the remote 
authority by sending a request to at least one of the network 
devices to connect to another of the network devices by sending 
to the at least one network device the current public IP 
addresses of the other network devices to which the at least one 
network device is to be connected, 

wherein each of the two or more network devices dooo 
«et — have free of any means to permanently store its private 
configuration data instead is provided with configuration 
information only sufficient to contact only an — the internet 
service provider to request a first IP address, and using that 
first IP address to connect to the remote authority at a 
designated internet network address of the remote authority, and 
subsequently downloading from a remote configuration service 
authorized by the remote authority the entire configuration 
details and software for the specific internet network device 
each time the device is initialized , each of the two or more 
network devices creating a private network in a downlink separate 
from end user devices in the created private network. 
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29. (previously presented) A method as claimed in claim 

28, wherein a user sends a request via secure internet access to 
the remote authority to create a VPN between some or all of the 
network devices whose addresses have been stored at the remote 
authority . 

30. (previously presented) A method as claimed in claim 

29, wherein each of the two or more network devices communicate 
with the remote authority on schedule to send statistics for 
storage and analysis. 

31. (previously presented) A method as claimed in claim 

30, wherein each of the two or more network devices are routers. 

32. (previously presented) A method as claimed in claim 

31, wherein the routers form part of ADSL modems. 

33. (cancelled) 

34. (currently amended) A method as claimed in claim 
-3^-32, wherein the configuration details and software are 
downloaded as a single transaction. 
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35. (previously presented) A method as claimed in claim 

34, wherein the configuration details and software are lost when 
the network device loses power. 

36. (previously presented) A method as claimed in claim 

35, wherein the configuration details and software remain 
unchanged for the duration of the network devices "powered on" 
cycle . 

37. (previously presented) A method as claimed in claim 

36, wherein the configuration details and software are only 
downloaded upon a power up sequence. 

38. (previously presented) A method as claimed in claim 
34, wherein the remote authority sends a code to at least one of 
the network devices which forces it to download the configuration 
details and software. 

39. (previously presented) A method as claimed in claim 
34, wherein the user configuration details and software can be 
changed by a user via a secure internet connection to the remote 
authority . 
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